Comparison Overview

San Mateo-Foster City Education Foundation

VS

Charity On Top Foundation, Inc.

San Mateo-Foster City Education Foundation

1170 Chess Drive, None, Foster City, CA, US, 94404
Last Update: 2025-12-19
View Profile
Between 750 and 799
https://www.smfcedfund.org/

The San Mateo Foster City Education Foundation is a 501(c)(3) non-profit volunteer organization founded in 1989. The mission of the Foundation is to support and enhance public education in the 21 elementary and middle schools in San Mateo and Foster City. We strongly believe that every child deserves the best education possible, and that educating the whole child is necessary for developing the next generation of future leaders and community members. The Foundation is committed to reaching every child in the San Mateo-Foster City School District. A strong Education Foundation does more than just support the children in its care, it impacts the entire community. We are committed to reaching out to our greater community, raising awareness of the value of supporting local schools to those outside of our immediate parent base. The Education Foundation funds core programming in the Arts, Sports, Music, STEM, and Wellness. The San Mateo-Foster City Education Foundation is a 501(c)(3) non-profit organization run by a Board of Directors consisting of dedicated parent and community volunteers. How can you help?/¿En qué puedes ayudar? * Partner with us as an advocate. Share the truth that each student’s educational experience and outcome impacts our collective future./ Asociarse con nosotros como partidario. Comparta la verdad de que la experiencia educativa y el resultado de cada estudiante impacta nuestro futuro colectivo. * Encourage others to donate to the Education Foundation as a way to turn hopes and values into meaningful action./ Animar a otros a donar a la Fundación para la Educación como una forma de convertir las esperanzas y valores en acciones significativas. * Participate in our annual Readathon and 5k/10k Run2Fund Education./ Participe en nuestro Readathon anual y en 5k/10k Run2Fund Education.

NAICS: 561499
NAICS Definition: All Other Business Support Services
Employees: 10
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Charity On Top Foundation, Inc.

117 E. Colorado Blvd. Suite 200, Pasadena, 91780, US
Last Update: 2025-12-21
Between 750 and 799
http://www.charityontop.org

Charity On Top is an innovative ecosystem for individuals and companies who want to genuinely infuse meaningful, personal charitable giving into their daily lives and work. Through charity gift cards, philanthropic consulting and benefits for all 1.8 million charities we support, Charity On Top is intentionally disrupting how we think about nonprofit giving, and pushing more money to organizations to help solve our greatest challenges.

NAICS: 561499
NAICS Definition: All Other Business Support Services
Employees: 8
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/smfcedfund.jpeg
San Mateo-Foster City Education Foundation
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/charity-on-top.jpeg
Charity On Top Foundation, Inc.
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
San Mateo-Foster City Education Foundation
100%
Compliance Rate
0/4 Standards Verified
Charity On Top Foundation, Inc.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Fundraising Industry Average (This Year)

No incidents recorded for San Mateo-Foster City Education Foundation in 2025.

Incidents vs Fundraising Industry Average (This Year)

No incidents recorded for Charity On Top Foundation, Inc. in 2025.

Incident History — San Mateo-Foster City Education Foundation (X = Date, Y = Severity)

San Mateo-Foster City Education Foundation cyber incidents detection timeline including parent company and subsidiaries

Incident History — Charity On Top Foundation, Inc. (X = Date, Y = Severity)

Charity On Top Foundation, Inc. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/smfcedfund.jpeg
San Mateo-Foster City Education Foundation
Incidents

No Incident

https://images.rankiteo.com/companyimages/charity-on-top.jpeg
Charity On Top Foundation, Inc.
Incidents

No Incident

FAQ

San Mateo-Foster City Education Foundation company demonstrates a stronger AI Cybersecurity Score compared to Charity On Top Foundation, Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Charity On Top Foundation, Inc. company has disclosed a higher number of cyber incidents compared to San Mateo-Foster City Education Foundation company.

In the current year, Charity On Top Foundation, Inc. company and San Mateo-Foster City Education Foundation company have not reported any cyber incidents.

Neither Charity On Top Foundation, Inc. company nor San Mateo-Foster City Education Foundation company has reported experiencing a ransomware attack publicly.

Neither Charity On Top Foundation, Inc. company nor San Mateo-Foster City Education Foundation company has reported experiencing a data breach publicly.

Neither Charity On Top Foundation, Inc. company nor San Mateo-Foster City Education Foundation company has reported experiencing targeted cyberattacks publicly.

Neither San Mateo-Foster City Education Foundation company nor Charity On Top Foundation, Inc. company has reported experiencing or disclosing vulnerabilities publicly.

Neither San Mateo-Foster City Education Foundation nor Charity On Top Foundation, Inc. holds any compliance certifications.

Neither company holds any compliance certifications.

Neither San Mateo-Foster City Education Foundation company nor Charity On Top Foundation, Inc. company has publicly disclosed detailed information about the number of their subsidiaries.

San Mateo-Foster City Education Foundation company employs more people globally than Charity On Top Foundation, Inc. company, reflecting its scale as a Fundraising.

Neither San Mateo-Foster City Education Foundation nor Charity On Top Foundation, Inc. holds SOC 2 Type 1 certification.

Neither San Mateo-Foster City Education Foundation nor Charity On Top Foundation, Inc. holds SOC 2 Type 2 certification.

Neither San Mateo-Foster City Education Foundation nor Charity On Top Foundation, Inc. holds ISO 27001 certification.

Neither San Mateo-Foster City Education Foundation nor Charity On Top Foundation, Inc. holds PCI DSS certification.

Neither San Mateo-Foster City Education Foundation nor Charity On Top Foundation, Inc. holds HIPAA certification.

Neither San Mateo-Foster City Education Foundation nor Charity On Top Foundation, Inc. holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.

Published
Date
2025-12-20
Updated
Date
2025-12-20
Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.

Published
Date
2025-12-20
Updated
Date
2025-12-20
Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
References
Description

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.

Published
Date
2025-12-20
Updated
Date
2025-12-20
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
References
Description

The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.

Published
Date
2025-12-20
Updated
Date
2025-12-20
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
Description

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.

Published
Date
2025-12-20
Updated
Date
2025-12-20
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References